Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: pPhMSH0C1lmYx4/eFSYg0EIM39aAdDKrvPoDHhL/2X4=
Subject key identifier: FA:52:42:82:DA:D1:4E:B5:26:DC:C5:1D:F9:E7:AE:94:71:65:15:EE
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019E1ED9DA5007A1E9B9720C67197CD263A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 08B2
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: QuuevNK92kxIIu+MxL74K7Db6stnR6oCfC6CfI2BD8Y=)
2: W47tZvu_CAnfpr4QCettmz3h4VA.roa (hash: m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=)
3: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (hash: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:da:50:07:a1:e9:b9:72:0c:67:19:7c:d2:63:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=fa524282dad14eb526dcc51df9e7ae94716515ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:02:1e:08:f6:e7:e6:8f:6c:38:a2:c8:56:
3e:1f:73:ac:a3:5b:d2:b2:71:ec:d5:ae:ee:ad:1b:
ed:cb:18:19:0d:2a:22:e8:4b:15:80:1f:1f:69:ce:
5a:8c:d7:66:4e:02:9b:fa:96:31:0c:78:81:df:3e:
08:14:e6:ec:d1:76:10:c5:50:0f:86:04:29:b9:51:
54:07:83:32:8c:1b:90:67:c4:dd:86:78:7f:30:b2:
ba:58:64:e1:3b:ba:66:f5:27:68:ba:81:a4:07:62:
24:c1:7a:45:ff:9e:3b:17:50:55:73:9e:3e:8a:f4:
a3:fb:57:92:4d:9e:ad:11:e0:f3:c8:a0:9b:7b:21:
3b:6f:fc:26:c8:89:0a:2f:34:06:f2:df:ee:62:e8:
c4:4a:e1:c6:f1:88:35:5f:fa:15:5f:de:7f:90:0b:
0d:eb:c7:dc:c0:0d:e8:91:7b:4f:19:6f:71:f6:8d:
35:54:12:48:ff:ce:aa:5a:3f:40:7b:3a:c5:ad:f2:
78:3b:28:58:f5:65:c6:11:94:4d:e4:fb:da:84:9a:
48:34:ac:b6:ee:f2:8d:49:b0:a4:2e:0e:65:c1:a7:
14:c3:8f:1e:50:57:f7:79:f5:81:a3:f5:f0:ef:c1:
21:cd:2f:7a:e4:51:bc:3c:5a:59:4a:5a:3e:a1:f8:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:42:82:DA:D1:4E:B5:26:DC:C5:1D:F9:E7:AE:94:71:65:15:EE
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:18:2c:11:97:ed:83:2e:6e:a0:18:59:3e:b8:37:22:4f:ec:
bd:4e:af:bb:de:a7:71:8d:ec:41:8e:36:cb:1d:d7:29:66:ad:
be:5a:1a:d3:61:74:26:44:9d:3f:f8:02:50:53:5a:a0:dc:0d:
89:d3:f1:27:86:6a:04:2a:88:83:b4:53:e0:be:23:85:05:5c:
b9:c3:ce:45:80:c9:56:5a:e0:f6:d6:a2:75:2c:96:37:a1:6c:
ea:df:81:7b:7e:3e:6d:1d:af:5a:9c:96:f6:04:56:7e:ca:ae:
21:f0:1c:d6:63:06:59:f7:ca:52:50:df:60:af:98:6d:23:47:
25:0c:de:ac:68:75:ad:b0:69:8a:fb:a7:7b:4f:fd:9d:18:bb:
59:cd:9b:33:41:fd:76:d1:ff:85:14:89:73:c6:7b:7b:7c:27:
2f:ef:13:43:44:9d:13:fd:59:a1:41:46:a5:4a:45:04:a1:16:
0e:23:4a:58:3b:bd:2c:80:33:cb:75:4a:91:f0:6c:57:ff:ba:
8a:5f:2e:f1:08:f5:ec:34:ce:c3:cc:de:47:47:12:7a:3e:57:
ec:01:fb:af:ac:65:fa:9e:f4:bc:48:54:d3:ed:4d:15:95:9f:
4b:64:61:94:63:e3:28:f0:75:af:b8:3a:74:41:b4:05:25:63:
8c:3d:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:14 2026 by rpki-client